Which of these would not be considered an authentication factor?

Signature

Fingerprint

GPS location

OS installation USB flash

Password

Correct!

Wrong!

-

Which of these would not be considered OS hardening?

Change the management interface credentials

Create an IPsec tunnel

Disable unnecessary accounts

Disable unnecessary services

Require complex passwords

Correct!

Wrong!

-

Which of these would be the best description of PAP?

A symmetric encryption cipher

An encrypted tunnel between two locations

Cleartext password exchange

Used for digital signatures

Correct!

Wrong!

-

In which of these cases would you be most likely to use tarpitting?

Wireless network authentication

IPsec encryption

None of the above

Spam filtering

Mitigate a DDoS attack

Correct!

Wrong!

-

How can malware perform activities on your computer that would not normally be possible with your OS permissions?

Transitive attack

Man-in-the-Middle attack

Privilege Escalation

Spoofing

Denial-of-service attack

Correct!

Wrong!

-

In which of these would you be most likely to use TACACS+?

Authenticate login credentials

Route traffic across redundant network links

Transfer documents between file servers

Encrypt all network traffic sent between two sites

Verify index settings on a SQL database

Correct!

Wrong!

-

What kind of auditing should be used to validate your user permissions?

Escalation auditing

Privilege auditing

Operating system auditing

Administrative auditing

Usage auditing

Correct!

Wrong!

-

Which of these would be most commonly associated with a protocol analyzer?

Filter ingress and egress traffic by port number or application type

Identify the sequence number of a traffic flow

Validate the input of a browser-based application

Restrict access to websites based on category or individual URL

Identify a known vulnerability traversing the network

Correct!

Wrong!

-

What attack type waits for a predefined event to occur?

Rootkit

Man-in-the-middle

Logic bomb

Polymorphic malware

SQL Injection

Ransomware

Correct!

Wrong!

-

Which attack type can obtain personal information using an IVR?

URL hijacking

Spoofing

Man-in-the-middle

Vishing

Watering hole attack

Correct!

Wrong!

-

Which of these would be the most useful attack to gain access to a WPA2-PSK network?

Perform a buffer overflow

Implement a DDoS attack

Execute a database injection

Perform a dictionary attack

Exploit a cryptographic vulnerability

Correct!

Wrong!

-

Which of these would restrict the installation of unapproved applications on a mobile device?

Geo-fencing

MDM whitelisting

Device encryption

Storage segmentation

Credential management

Correct!

Wrong!

-

Which of these would be the best example of a qualitative risk?

The help desk staff is not properly trained on the new ERP software

Upgrading the firewalls to support new encryption types is not in the budget

An Internet outage would lose $4,000 US per minute

The fine for not storing data in encrypted form is $10,000 US per incident

The ERP software won’t receive updates because the annual maintenance fee has not been paid

Correct!

Wrong!

-

What protocol type (TCP/UDP) and port number is commonly used for secure terminal communication?

tcp/80

tcp/21

tcp/25

tcp/20

tcp/22

Correct!

Wrong!

-

Which of these would be the best description of Google Mail?

PaaS

Community Cloud

SaaS

Private Cloud

IaaS

Correct!

Wrong!

-

Which of these database types is most associated with big data?

SQL

RDBMS

MySQL

ODBC

NoSQL

Correct!

Wrong!

-

Which of these would be categorized as a symmetric encryption cipher?

3DES

RSA

HMAC

IPsec

MD5

Diffie-Hellman

Correct!

Wrong!

-

What of these systems would be most likely targeted on a SCADA network?

Point of sale terminal

SQL database server

Manufacturing equipment

Wireless access point

Multifunction printer

Automobile Bluetooth network

Correct!

Wrong!

-

What is the AIC Triad?

Authentication, Initialization, and Challenge

Access, Identification, and Control

Application, Interconnection, and Contingency

Accounting, Integrity, and Certification

Availability, Integrity, and Confidentiality

Correct!

Wrong!

-

Which of these would be an advantage of PFS?

Mitagates some types of social engineering attacks

Increases the number of authentication factors

Tape backups are stored with improved encryption

Does not use a web server private key for encryption

Vulnerabilities and attacks are identified in real-time over the network

Correct!

Wrong!

-

CompTIA SY0-401 Security+ Pop Quiz Online – Quiz #3

Professor Messer on Instagram

Upcoming Events

Time

Location

Register

Calendar GoogleCal

Time

Location

Register

Calendar GoogleCal

Time

Location

Register

Calendar GoogleCal

Time

Location

Register

Calendar GoogleCal

Categories

Recent Posts

Site Information

Connect